Help with SAML integration - New Users are not created

Support
1

Hi there !

I am trying to integrate Keycloak Single Sign On with Discourse. I am using SAML client. Sequence is this:

  1. User goes to discourse webpage. (Discourse version: 2.7.0)
  2. User click on LogIn button
  3. User selects with SAML
  4. User is forwarded to the Keycloak instance for authentication.
  5. Keycloak redirect User back to discourse webpage.
  6. User is not created. Error shows: “Sorry, there was an error authorizing your account. Please try again.”

Discourse Logs shows error:

“(saml) Authentication failure! invalid_ticket: OneLogin::RubySaml::ValidationError, Fingerprint mismatch”

(

user
user2338×1318 427 KB

Any hint or advise ? Thanks for your time.

3

You can search the saml plugin for “Fingerprint mismatch.” My guess is that you don’t have the right credentials/kays to talk to SAML. Next is something about the scope.

1 Like